CVE-2007-6600: Medium severity PostgreSQL postgresql vulnerability

Published Jan 1, 2008
·
Updated

Any logged-in database user who has the ability to create tables and functions (which in most installations will be everybody) can acquire database superuser privilege, which means he can make the server process do whatever he wants.

Other sources

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.

Red Hat

Affected Software

74 affected componentsFixes available
redhat/postgresql<0:7.4.19-1.el4_6.1
0:7.4.19-1.el4_6.1
redhat/postgresql<0:8.1.11-1.el5_1.1
0:8.1.11-1.el5_1.1
redhat/postgresql<0:8.1.11-1.el4
0:8.1.11-1.el4
redhat/8.2.6<1.
1.
PostgreSQL postgresql=7.3
PostgreSQL postgresql=7.3.1
PostgreSQL postgresql=7.3.2
PostgreSQL postgresql=7.3.3
PostgreSQL postgresql=7.3.4
PostgreSQL postgresql=7.3.5
PostgreSQL postgresql=7.3.6
PostgreSQL postgresql=7.3.7
PostgreSQL postgresql=7.3.8
PostgreSQL postgresql=7.3.9
PostgreSQL postgresql=7.3.10
PostgreSQL postgresql=7.3.11
PostgreSQL postgresql=7.3.12
PostgreSQL postgresql=7.3.13
PostgreSQL postgresql=7.3.14
PostgreSQL postgresql=7.3.15
PostgreSQL postgresql=7.3.16
PostgreSQL postgresql=7.3.17
PostgreSQL postgresql=7.3.18
PostgreSQL postgresql=7.3.19
PostgreSQL postgresql=7.4
PostgreSQL postgresql=7.4.1
PostgreSQL postgresql=7.4.2
PostgreSQL postgresql=7.4.3
PostgreSQL postgresql=7.4.4
PostgreSQL postgresql=7.4.5
PostgreSQL postgresql=7.4.6
PostgreSQL postgresql=7.4.7
PostgreSQL postgresql=7.4.8
PostgreSQL postgresql=7.4.9
PostgreSQL postgresql=7.4.10
PostgreSQL postgresql=7.4.11
PostgreSQL postgresql=7.4.12
PostgreSQL postgresql=7.4.13
PostgreSQL postgresql=7.4.14
PostgreSQL postgresql=7.4.16
PostgreSQL postgresql=7.4.17
PostgreSQL postgresql=7.4.18
PostgreSQL postgresql=8.0
PostgreSQL postgresql=8.0.0
PostgreSQL postgresql=8.0.1
PostgreSQL postgresql=8.0.2
PostgreSQL postgresql=8.0.3
PostgreSQL postgresql=8.0.4
PostgreSQL postgresql=8.0.5
PostgreSQL postgresql=8.0.6
PostgreSQL postgresql=8.0.7
PostgreSQL postgresql=8.0.8
PostgreSQL postgresql=8.0.9
PostgreSQL postgresql=8.0.10
PostgreSQL postgresql=8.0.11
PostgreSQL postgresql=8.0.12
PostgreSQL postgresql=8.0.13
PostgreSQL postgresql=8.0.14
PostgreSQL postgresql=8.1.1
PostgreSQL postgresql=8.1.2
PostgreSQL postgresql=8.1.3
PostgreSQL postgresql=8.1.4
PostgreSQL postgresql=8.1.5
PostgreSQL postgresql=8.1.6
PostgreSQL postgresql=8.1.7
PostgreSQL postgresql=8.1.8
PostgreSQL postgresql=8.1.9
PostgreSQL postgresql=8.1.10
PostgreSQL postgresql=8.2
PostgreSQL postgresql=8.2.1
PostgreSQL postgresql=8.2.2
PostgreSQL postgresql=8.2.3
PostgreSQL postgresql=8.2.4
PostgreSQL postgresql=8.2.5

Event History

Jan 7, 2008
CVE Published
via Red Hat·12:00 AM
Jan 10, 2008
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2007-6600?

CVE-2007-6600 is classified as a medium severity vulnerability affecting PostgreSQL versions before 8.2.6.

2

How do I fix CVE-2007-6600?

To fix CVE-2007-6600, upgrade PostgreSQL to versions 7.4.19, 8.1.11, or 8.2.6 or later.

3

Which PostgreSQL versions are affected by CVE-2007-6600?

CVE-2007-6600 affects PostgreSQL versions 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21.

4

What specifically does CVE-2007-6600 impact in PostgreSQL?

CVE-2007-6600 impacts the use of superuser privileges instead of table owner privileges for VACUUM and ANALYZE operations.

5

Are there any known exploits for CVE-2007-6600?

There is no publicly available information indicating that CVE-2007-6600 has been actively exploited.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203